Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows WebBrowser Control. The following products and versions are affected:Windows 10 Version 1809 for 32-bit...

KLA12607 PE vulnerability in Microsoft System Center

An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2022-33640 Related products Microsoft-System-Center-Operations-Manager CVE list CVE-2022-33640 critical KB list Solution Install...

Microsoft Windows Storage Spaces Controller 安全漏洞

Microsoft Windows Storage Spaces Controller is a necessary driver for providing storage space functionality from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Storage Spaces Controller. The following products and editions are affected:Windows 10 Version 1809 for...

Microsoft Windows Kerberos 安全漏洞

Microsoft Windows Kerberos is a software for authentication in network clusters from Microsoft Corporation.Kerberos also serves as a network authentication protocol designed to provide strong authentication services to client/server applications via a key system. A security vulnerability exists i...

KB5016622: Windows 10 Version 1607 and Windows Server 2016 Security Update (August 2022)

The remote Windows host is missing security update 5016622. It is, therefore, affected by multiple vulnerabilities - Windows Point-to-Point Protocol PPP Denial of Service Vulnerability CVE-2022-35747, CVE-2022-35769 - Windows Point-to-Point Protocol PPP Remote Code Execution Vulnerability...

CVE-2016-6063

Summary: CVE-2016-6063 affects IBM Resilient prior to version 28 due to the use of outdated SSH ciphers. Affected versions: IBM Resilient 26.0, 26.1, 26.2, 26.3, 26.4, 27.0, 27.1. Impact: potential vulnerability in SSH communication when outdated ciphers are used. Root cause: default sshd_config ...

CVE-2016-6064

IBM Resilient stores passwords in clear text, affecting IBM Resilient versions 27.0–28.1. The issue can enable local users with filesystem access to read credentials and potentially escalate privileges or access integrated systems. CVSS Base Score is 6.2 with vector CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S...

August 2, 2022, update for Office 2016 (KB5002248)

None None...

CVE-2016-4982

creationtimestamp| type| source ---|---|--- 2022-07-29 20:42:44+00:00| seen| https://t.me/VulnerabilityNews/29267...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-4982. Reason: This candidate is a duplicate of CVE-2016-4982. Notes: All CVE users should reference CVE-2016-4982 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2016-4981

CVE-2016-4981 is rejected/not used; reference CVE-2016-4982 instead.

CVE-2016-4426

creationtimestamp| type| source ---|---|--- 2022-07-28 20:12:57+00:00| seen| https://t.me/cibsecurity/47231...

CVE-2016-3709

creationtimestamp| type| source ---|---|--- 2022-07-28 20:12:50+00:00| seen| https://t.me/cibsecurity/47224...

CVE-2016-4991

creationtimestamp| type| source ---|---|--- 2022-07-28 20:12:36+00:00| seen| https://t.me/cibsecurity/47215...

CVE-2016-2139

creationtimestamp| type| source ---|---|--- 2022-07-28 18:12:39+00:00| seen| https://t.me/cibsecurity/47209...

CVE-2016-2138

creationtimestamp| type| source ---|---|--- 2022-07-28 18:12:33+00:00| seen| https://t.me/cibsecurity/47204...

CVE-2016-4991

Input passed to the Pdf function is shell escaped and passed to childprocess.exec during PDF rendering. However, the shell escape does not properly encode all special characters, namely, semicolon and curly braces. This can be abused to achieve command execution. This problem affects nodepdf 1.3....

CVE-2016-4426

In zulip before 1.3.12, bot API keys were accessible to other users in the same realm...

CVE-2016-0796

WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files is prone to multiple vulnerabilities, including open proxy and security bypass vulnerabilities because it fails to properly verify user-supplied input. An attacker may leverage these issues to hide attacks directed at a...

CVE-2016-0796

WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files is prone to multiple vulnerabilities, including open proxy and security bypass vulnerabilities because it fails to properly verify user-supplied input. An attacker may leverage these issues to hide attacks directed at a...